diff --git a/php-8.0.27.tar.xz b/php-8.0.28.tar.xz
similarity index 57%
rename from php-8.0.27.tar.xz
rename to php-8.0.28.tar.xz
index 97c5839b2d3cdc6e38a0a13b49d558a96b0e725e..e45c8ff96f6e5eed1326385c4a2dfaa8de1fbc80 100644
Binary files a/php-8.0.27.tar.xz and b/php-8.0.28.tar.xz differ
diff --git a/php.spec b/php.spec
index a2d187327b18ee284ee8cd45ed9197a274d7a582..dc854cc83559ab2c9c9f959df037314250ac47cf 100644
--- a/php.spec
+++ b/php.spec
@@ -22,7 +22,7 @@
 %global with_freetds    0
 %global with_sodium     1
 %global with_pspell     0
-%global upver           8.0.27
+%global upver           8.0.28
 
 Name:          php
 Version:       %{upver}
@@ -1082,6 +1082,10 @@ systemctl try-restart php-fpm.service >/dev/null 2>&1 || :
 %{_mandir}/*
 
 %changelog
+* Tue Feb 21 2023 Dillon Chen <dillon.chen@gmail.com> - 8.0.28-1
+- CVE-2023-0567,CVE-2023-0568,CVE-2023-0662
+- update to 8.0.28
+
 * Mon Jan 16 2023 Dillon Chen <dillon.chen@gmail.com> - 8.0.27-1
 - New version 8.0.27
 - Fix CVE-2022-31631